Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/IeIctkgaKIoSXl0xABO5D4aMGm0.roa
File: IeIctkgaKIoSXl0xABO5D4aMGm0.roa (raw, json)
Hash identifier: alUr92oBh+5kupDZ2cQazjDVzl26/j9Q/Em8OPc6Eg4=
Subject key identifier: 21:E2:1C:B6:48:1A:28:8A:12:5E:5D:31:00:13:B9:0F:86:8C:1A:6D
Certificate issuer: /CN=7ebcdf86df8030b05cf0f2aab5b89e85a7894a2b
Certificate serial: 019F2368406B4C2F31841F36A7C0696A83F5
Authority key identifier: 7E:BC:DF:86:DF:80:30:B0:5C:F0:F2:AA:B5:B8:9E:85:A7:89:4A:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/IeIctkgaKIoSXl0xABO5D4aMGm0.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 137.73.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.mft
rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:40:6b:4c:2f:31:84:1f:36:a7:c0:69:6a:83:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebcdf86df8030b05cf0f2aab5b89e85a7894a2b
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21e21cb6481a288a125e5d310013b90f868c1a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:c3:3b:1d:34:0d:16:ee:9f:96:c5:8d:3c:
94:ba:84:3d:f4:4b:fa:ca:28:27:90:68:05:13:93:
0e:b8:23:db:47:80:16:94:eb:55:c4:1e:53:cb:57:
29:48:f9:2a:72:f9:82:43:d5:62:f9:46:4c:81:43:
7a:43:13:94:f1:b7:a4:65:41:2c:d5:21:62:62:a7:
1b:ba:20:3d:0d:8f:37:94:7d:6e:bc:4a:46:69:39:
1f:e0:7c:44:c9:f6:24:ca:88:11:62:19:d5:d8:a2:
31:e6:f3:d8:16:ae:5c:13:61:81:a8:8c:3d:9d:08:
ab:51:8a:78:40:34:fa:59:08:31:51:4f:75:78:1c:
52:a5:7b:62:19:d5:a2:12:d6:f8:be:0e:72:35:83:
60:93:cb:dd:11:ce:ef:4b:69:9f:ab:2f:89:20:d8:
b5:31:1d:66:48:ec:5c:ae:99:64:4b:ce:ed:ec:ca:
e9:24:74:01:a1:e8:21:95:6d:bd:90:bf:dc:4e:84:
95:8c:51:34:ba:dd:3d:dd:2d:18:ea:7a:6a:40:be:
56:0a:64:0d:c6:42:46:41:14:48:dc:20:37:3f:e6:
5b:4a:85:46:01:79:b1:41:fa:c0:7f:d5:b9:69:ee:
ee:b7:ad:6a:cf:0f:11:4e:de:90:e9:45:bd:1c:e2:
1f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E2:1C:B6:48:1A:28:8A:12:5E:5D:31:00:13:B9:0F:86:8C:1A:6D
X509v3 Authority Key Identifier:
keyid:7E:BC:DF:86:DF:80:30:B0:5C:F0:F2:AA:B5:B8:9E:85:A7:89:4A:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frzfht-AMLBc8PKqtbiehaeJSis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/IeIctkgaKIoSXl0xABO5D4aMGm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7e0435-81eb-41d7-a01c-f12a76b17794/1/frzfht-AMLBc8PKqtbiehaeJSis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.73.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:02:61:a2:fa:2e:c7:ce:0b:0c:c1:71:a4:37:bc:5a:9a:24:
ea:6e:a9:f1:19:89:c8:b1:99:c4:be:a1:12:a3:c3:18:7e:93:
1d:48:44:79:9e:a9:f6:93:00:f4:ac:3e:ae:2c:68:22:df:15:
c8:0b:04:7b:56:e1:15:f3:62:d3:6d:04:7f:bc:94:b8:3e:89:
33:8b:c3:23:69:e0:27:12:71:46:e7:8f:30:af:1c:48:5c:29:
33:9b:fd:68:50:4d:ad:5b:55:8f:e8:f1:ed:2d:5c:11:fd:1c:
c9:04:d7:bc:2c:d4:11:2a:9b:20:2e:7e:6b:b0:dd:51:51:0c:
5a:e1:f1:fd:2c:bf:10:ee:4e:fd:de:42:22:f0:a6:8a:8a:07:
7f:60:cf:34:ed:65:3e:57:53:f4:6b:99:e0:96:d3:14:d4:ce:
0a:c1:5f:82:6d:2a:0d:0f:f3:6f:fc:77:ca:9a:f7:b3:ad:84:
9a:f0:df:fb:30:0d:b6:f0:1d:0a:a3:8d:e0:dc:ee:87:1e:d4:
26:61:40:52:40:ac:ee:07:b5:53:01:1e:66:66:9e:cb:ac:f8:
1f:ef:35:a5:24:68:c2:b3:c0:fc:ff:ef:9c:be:30:bf:6b:dd:
f6:e6:14:9f:22:c3:b7:c5:bf:dd:54:4f:22:da:d2:5c:60:d4:
cf:7c:c8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:59 2026 by rpki-client